Sailesh Mukil has posted comments on this change. Change subject: IMPALA-3159: impala-shell does not accept wildcard or SAN certificates ......................................................................
Patch Set 8: Code-Review+2 (1 comment) I'm running a private build just to confirm that the tests pass: http://sandbox.jenkins.cloudera.com/job/impala-private-build-and-test/3724/ Carry +2. http://gerrit.cloudera.org:8080/#/c/3615/8/be/src/testutil/certificates-info.txt File be/src/testutil/certificates-info.txt: PS8, Line 55: *) wildcard-san-cert-key-ca.pem: : : This is a combination of the certificate, key and the CA. This is a workaround : for the following bug: : https://bugzilla.redhat.com/show_bug.cgi?id=928390 : : We can get SAN certificates to work on versions less than Python-2.6.6-47 on RHEL : only if we combine all the 3 into one file. If we don't do this, our SAN : verification tests will fail if they happen to run on a machine with the above bug. : : cat wildcard-san-cert.pem wildcard-san-cert.key wildcardCA.pem > \ : wildcard-san-cert-key-ca.pem I found a workaround for the Python/RHEL bug while trying some different ways of making SAN certificates. The workaround is to have the certificate, key and the CA in the same file. This way at least our tests will pass (and we don't need to disable SAN testing). I've added the wildcard-san-cert-key-ca.pem file which is the combination of the three. -- To view, visit http://gerrit.cloudera.org:8080/3615 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-MessageType: comment Gerrit-Change-Id: I8908f05afe4a6da9713fd303c499c50f692985ef Gerrit-PatchSet: 8 Gerrit-Project: Impala Gerrit-Branch: cdh5-trunk Gerrit-Owner: Sailesh Mukil <[email protected]> Gerrit-Reviewer: Bharath Vissapragada <[email protected]> Gerrit-Reviewer: Henry Robinson <[email protected]> Gerrit-Reviewer: Internal Jenkins Gerrit-Reviewer: Sailesh Mukil <[email protected]> Gerrit-HasComments: Yes
